Encryption

• NTFS Permissions can be set on a folder using both NTFS and sharing option.
• NTFS Permissions allow the ability to deny or grant permissions.
• NTFS: The most restrictive permission will apply.

  
  

  E.g., deny beats allow
• NTFS Permissions support inheritance, meaning files and folders will inherit their permissions from a parent folder.
• Certain applications require administrator login, bypassing User Account Control (UAC).
• User Account Control (UAC) prevents malware from executing as an administrator on the machine.
• NTFS permissions apply to local and network connections.
• Share permissions only apply to connections over the network (network share).
• UAC: Limit software access.
• Bitlocker: Encrypts an entire volume or partition, not just a file
• Bitlocker To Go: Encrypt removable USB flash drives.
• EFS: Encrypts individual files and folders. (Windows Pro+ Only)
• Windows Domain Accounts: Accounts Centrally managed from Active Directory.
• Explicit permissions: Takes precedence over inherited permissions.
• Explicit permissions: Default permissions for a network share
• Permission propagation: a folder or file created inside another folder takes on (inherits) permissions applied to that folder.
• Share permissions can be set on a folder level.